2026-09-30_f8a8e8aee567dc6bdb71826abcfd572a_elex_upatre_wannacry

General

Target
2026-09-30_f8a8e8aee567dc6bdb71826abcfd572a_elex_upatre_wannacry
Size 19KB
Sample260930-hb4vaavemd
SHA256 f7c005c0e021baf4f2845fb74afc361f6298d14b349e26e6dfa6416fb2bf8df2
MD5 f8a8e8aee567dc6bdb71826abcfd572a
SHA1 4198fdc428cc42018d4c985ab94db7ee3601360a
SHA512 ee77cdb7b2144837bfe88bad25b81297545bdf6d78c009be168040da2c5dd7ec2e23f7dfa807982053c0e3874fc499ad90600f2c33961958fd2d0908a9dc725b
SSDEEP 384:T9IJCbzW2kYpOELjggggggLvggggggggUaoc:T9sCPW5YggggggLvggggggggUaoc
TLSH
T1BA9250B123C11591EB824DB68472721CE18D7E1313075EDB1B30FA968FF17D2AA729A9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables built or packed with MPress PE compressor 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-30_f8a8e8aee567dc6bdb71826abcfd572a_elex_upatre_wannacry

SHA256 f7c005c0e021baf4f2845fb74afc361f6298d14b349e26e6dfa6416fb2bf8df2
MD5 f8a8e8aee567dc6bdb71826abcfd572a
SHA1 4198fdc428cc42018d4c985ab94db7ee3601360a
SHA512 ee77cdb7b2144837bfe88bad25b81297545bdf6d78c009be168040da2c5dd7ec2e23f7dfa807982053c0e3874fc499ad90600f2c33961958fd2d0908a9dc725b
SSDEEP 384:T9IJCbzW2kYpOELjggggggLvggggggggUaoc:T9sCPW5YggggggLvggggggggUaoc
TLSH
T1BA9250B123C11591EB824DB68472721CE18D7E1313075EDB1B30FA968FF17D2AA729A9
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

5

Entry point

29036

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths